Candidate: CVE-2012-2092
PublicDate: 2019-12-06 17:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2092
 http://www.openwall.com/lists/oss-security/2012/04/10
Description:
 A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in
 the cobbler-ubuntu-import script due to an error when verifying the GPG
 signature.
Ubuntu-Description:
Notes:
 jdstrand> maas-provision in 12.04 is a code copy of cobbler, but with reduced
  features and usage. Only the portions of maas-provision specifically used by
  maas will recieve official support
Bugs:
 https://bugs.launchpad.net/ubuntu/+source/cobbler/+bug/974460
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N [5.9 MEDIUM]

Patches_cobbler:
upstream_cobbler: needs-triage
hardy_cobbler: DNE
lucid_cobbler: DNE
natty_cobbler: not-affected (cobbler-ubuntu-import DNE)
oneiric_cobbler: ignored (reached end-of-life)
precise_cobbler: released (2.2.2-0ubuntu32)
quantal_cobbler: released (2.2.2-0ubuntu32)
raring_cobbler: released (2.2.2-0ubuntu32)
devel_cobbler: released (2.2.2-0ubuntu32)

Patches_maas-provision:
upstream_maas-provision: needs-triage
hardy_maas-provision: DNE
lucid_maas-provision: DNE
natty_maas-provision: DNE
oneiric_maas-provision: DNE
precise_maas-provision: not-affected (based on patched cobbler)
quantal_maas-provision: DNE
raring_maas-provision: DNE
devel_maas-provision: DNE